Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: dGvSjBVDIVhMLpO0uFCyrwIJFp/66/u9KBwidaDeB1c=
Subject key identifier: 79:E9:4C:CD:66:CC:20:68:82:96:B7:66:F4:85:F1:13:31:4D:81:68
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 019F9EBAA96B684214FC11B3D2F5102A60EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 1051
Signing time: Sun 26 Jul 2026 14:01:00 +0000
Manifest this update: Sun 26 Jul 2026 14:01:00 +0000
Manifest next update: Mon 27 Jul 2026 14:01:00 +0000
Files and hashes: 1: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: fQMCmVf1ObsduMRcDVRtoJKQOycDqwXTCEH8OgOEQ/I=)
2: abxz-YS2pIcWJysLZsLURj3wFjE.roa (hash: v8u8I3KyfjrBtGFxRTuhA7B6RHsn+uH/zjkzCl303+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:a9:6b:68:42:14:fc:11:b3:d2:f5:10:2a:60:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Jul 26 14:01:00 2026 GMT
Not After : Jul 27 14:01:00 2026 GMT
Subject: CN=79e94ccd66cc20688296b766f485f113314d8168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:3c:05:e5:98:98:5f:67:f1:31:42:93:2a:
ca:e8:83:07:9e:e0:d0:c5:76:f0:b7:46:e8:a6:29:
8b:ef:d7:21:39:02:62:ba:97:24:5a:e6:f0:95:70:
fa:06:de:9b:cf:62:05:ad:39:a8:8b:a1:ec:50:38:
8b:9c:88:fc:5f:cb:e8:f6:d5:f0:6d:4b:a1:ae:0a:
17:ba:7f:c6:aa:e2:87:0b:54:45:4a:c8:9f:1a:02:
e7:8e:10:87:9c:28:dd:37:09:81:e4:e6:cb:5e:76:
2f:cd:17:f1:c2:b1:23:31:e0:f6:5e:0f:1f:83:ef:
ae:3f:05:63:46:f6:7c:07:29:34:c6:e5:9d:ca:27:
05:e1:c7:7d:b0:f5:15:07:d9:33:46:1c:bd:af:c7:
b4:dd:fb:2f:41:67:19:cd:5f:98:bc:68:f5:7c:ab:
fb:a6:8f:ea:c8:1e:93:f4:33:f5:f2:11:1d:ff:60:
21:cb:73:0a:1b:23:ca:f5:aa:c6:fe:ac:0c:06:54:
0f:0d:ab:83:9f:3b:86:b5:31:b4:fb:dd:51:c6:6a:
bb:87:33:43:59:c2:39:3f:a9:69:7e:4d:e5:05:b3:
01:6f:09:6f:ff:81:2d:3f:c6:2b:d2:8b:6a:54:93:
ba:5b:a4:c5:10:bc:64:19:0a:d8:e6:45:c9:77:ca:
ce:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E9:4C:CD:66:CC:20:68:82:96:B7:66:F4:85:F1:13:31:4D:81:68
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:79:15:60:7d:99:76:9b:cd:7a:66:cf:cb:88:3b:ae:43:b5:
70:6d:dc:9f:b3:35:21:ac:0d:7f:8b:88:1c:7f:20:89:b6:b6:
69:2c:4e:d1:d5:77:aa:fe:ee:68:3c:da:09:b0:66:f2:ba:e8:
b2:a3:82:9b:e5:78:77:c7:c6:51:6c:1b:31:ed:41:1c:40:d3:
48:bb:6e:92:c6:3f:76:37:a3:7f:8c:a6:05:ea:e4:06:be:dc:
94:b6:2f:f7:02:a1:2c:ff:f8:b4:18:16:39:e1:1d:c3:e8:c4:
24:1d:76:cd:c0:f6:11:a0:dc:fb:fd:4b:ac:77:08:41:46:e5:
57:ff:53:00:d2:88:bd:eb:82:c3:1f:74:13:dc:da:0c:37:aa:
fc:b9:e3:71:90:44:0e:77:63:f0:16:1d:5b:3c:0f:17:d9:c0:
55:6a:56:0b:c2:c4:e2:f2:a4:2d:db:35:db:4e:d3:b4:62:cf:
e5:e9:cd:d6:76:52:0c:eb:0d:cf:2b:8a:18:1f:e5:7f:81:73:
05:45:39:0b:bb:2a:c9:38:34:b4:5d:16:06:37:38:d5:ca:d9:
0d:dd:53:2c:ac:43:16:ff:7a:78:44:e3:6b:47:82:11:a8:03:
7b:a3:28:69:de:5f:20:bd:9e:f6:1b:b6:80:8f:ab:cd:04:8e:
a1:01:f6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:06:31 2026 by rpki-client